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A method for testing the authenticity of a data carrier 
This invention relates to a method for testing the authenticity of a data carrier 

according to the preamble of claim L The invention farther relates to the data carrier 

used in said method and to a system comprising the data carrier and an external de- 
vice. 

To prevent unauthorized production and replication of data carriers or the use 
of such data carriers, it is necessary to be able to test the authenticity of a data car- 
rier with a high measure of reliability. It is also necessary in many cases to be able to 
test the authenticity of an external device communicating with the data carrier. 

A method for testing the authenticity of a data earner is known from 
DE 44 19 805 A 1. In the known method the data carrier used has at least one inte- 
grated Circuit With memOly UllitS and logical units and a data line for data exchange 
with an external device. The integrated circuit additionally has a separate hardwired 
Circuit for transmitting and/or receiving data during the power-up sequence. Said 
separate circuit is used for authenticity testing, the first transmission or reception of 
data being completed within a defined time domain of the power-up sequence in 

wbicb no defined state is specified for the data line by ISO standard 78 1 6, Data rele- 
vant for authenticity testing are transmitted between data carrier and external device 
either via a data line on which other data are also exchanged between data carrier 
and external device or via other lines which do not meet this standard data line and 

are currently reserved for future applications. 

The problem of the invention is to state a method for testing the authenticity of 
a data earner and/or an external device which can be used flexibly and simultane- 
ously offers a very high security standard. 

This problem is solved by the features stated in the independent claims. 

The basic idea Of the invention is to equip the data carrier and external device 
each with a special additional apparatus for generating and/or testing authenticity 
data and to perform the data transmission between data carrier and external device 
necessary for authenticity testing at least partly via a special transmission channel, 
the additional apparatuses for generatii^ and/or testing the authenticity data and op- 



tionally also the transmission channel making special demands on the data carrier or 

external device which cannot be met by conventional designs. 

The invention has the advantage of permitting very reliable authenticity testing 
Without USing the Standard transmission channel between data carrier and external 
device or being dependent on the standard transmission channel. 

Further, the invention offers very good protection from impermissible repro- 
duction of the data carrier or external device since the inventive additional appara- 
tuses for generating and/or testing authenticity data and the inventive additional 

transmission channel for authenticity testing are not present in conventional data 

carriers and external devices, thereby making it difficult for unauthorized persons to 

procure die required components. This hurdle for impermissible reproduction can be 
made even higher if the additional apparatuses for generating and/or testing authen- 
ticity data and the transmission channel for authenticity testing presuppose a tech- 
nology in the data carrier or external device which can be procured only with great 
difficulty or not at all by an unauthorized person. This technology preferably resides 
at least partly in a different technical area from the technologies required for pro- 
ducing conventional data carriers. 

In authenticity testing of the data carrier the additional apparatus of the data 

carrier generates authenticity data and communicates them tO the eXtHIial deVlCe Via 
the specially provided transmission channel. The external device tests the communi- 
cated authenticity data and decides on the authenticity of the data carrier. This deci- 
sion can additionally be made contingent on whether a connection exists between the 
additional apparatus of the data carrier and a microcontroller disposed in the data 
carrier. 

Depending on security requirements and special circumstances of the applica- 
tion, one performs the data transmission necessary for authenticity testing using at 
least One transmission channel separated either logically or physically from the stan- 
dard transmission channel. 

Logical separation can be attained for example by using the same line or 
transmission path for transmitting authenticity data as for transmitting other data but 
coding authenticity data on this line or transmission path in such a way that they can 



be separated from other data and do not impair transmission of other data. For cod- 
ing authenticity data one can use tolerances permitted by the ISO standard for volt- 
age level or for localization in time of the transition between different logic levels of 
the Signals Of the Standard transmission channel. Since this kind of coding does not 
exceed tolerances specified by the ISO standard for voltage levels or transitional be- 
havior of the signals, this kind of data transmission is ISO-compatible. For applica- 
tions outside the ISO standard the stated tolerance ranges can be exceeded. An ad- 
vantage of the described data transmission is in addition that one can fall back on 

existing lines and thus need not install additional lines or other transmission paths. 

Instead of the line of the standard transmission channel one can also fall back on 
other lines, for example the line for the supply voltage or the line for the clock signal 
or also a contactless transmission path. The only important thing is that the line or 
transmission path USed permits a Connection to be made between data carrier and 
external device for the purpose of transmitting authenticity data. 

However, physical separation of the transmission channel for transmitting 

authenticity data from the standard transmission channel has the advantage of open- 
ing up almost unlimited possibilities of variation for realizing the authenticity testing 
method. This permits technical effort and thus also costs, on the one hand, and the 

desired security standard, on the other hand, to be optimally adapted to the particular 
application. Since compatibility with an existing line or transmission path can be 
disregarded, one can use for example a highly complex and limitedly available addi- 
tional apparatus Of any Construction for generating the data to be transmitted which 
identifies the data carrier or external device as authentic and thus makes it virtually 
impossible to imitate these components. For example, one can also use a great vari- 
ety of contactless transmission techniques in this connection. 

Further advantageous embodiments and developments are described in the fol- 
lowing and shown in the drawings, in which: 

Fig, 1 shows a block diagram to illustrate the basic principle of the invention, 

Fig, 2 shows a variant of the block diagram of Fig. 1, 

Figs. 3a and 36 show block diagrams of embodiments of the inventive systems 
wherein authenticity data are transmitted via the standard data line, 
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Figs. 4a and 4b show signal patterns over time on the standard data line in case 
authenticity data are transmitted within transition regions defined in the area of the 
signal edges of standard data, 

Figs. 5a and 5b show signal patterns over time on the standard data line in case 

authenticity data are impressed on the signal for Standard data SS Small VOltSge flllO 
tuations, and 

Fig. 6 shows a block diagram of an embodiment of the inventive System 
wherein data required for authenticity testing are transmitted contactlessly between 

external device and data earner. 

Fig. 1 shows a block diagram to illustrate the basic principle of the invention. 
Chip card 1 has microcontroller 3 and additional apparatus 4 for generating and 
testing authenticity data. Microcontroller 3 of chip card 1 is connected with micro- 
controller 2 Of external device 5 via first transmission channel A 9 which normally 
corresponds to the standard data line. Transmission channels and also further 
transmission channels are Shown by double arrows indicating the direction of data 
transmission. Via transmission channel A transactions are completed in known 
fashion between chip card 1 and external device 2, which may be for example a POS 
terminal or an automatic teller machine, etc. Data transmission via transmission 
channel A follows a transmission protocol defined by ISO standard 78 16. In known 
systems the complete authenticity testing of chip card 1 Or external device 2 - if nec- 
essary for the particular application - is also performed via transmission channels. 
This authenticity testing can be performed for example in the form of a reciprocal 
authentication method on the challenge and response principle. 

According to the invention, further transmission channel B is present in addi- 
tion to transmission channel^ for connecting additional apparatus 4 of chip card l 

with additional apparatus 6 of external device 2. Further, microcontrollers 3, 5 and 
additional apparatuses 4, 6 are interconnected, respectively. Data required by chip 
card 1 or external device 2 for authenticity testing which were previously generated 
by additional apparatus 4 or 6 are transmitted via transmission ChaiUiel B. Authen- 
ticity data received by other additional apparatus 6 or 4 are evaluated and it is de- 
cided whether chip card 1 or the external device is authentic. Additional apparatus 4 



of chip card 1 can be part of the module bearing microcontroller 3. Additional appa- 
ratus 6 of external device 2 will normally be realized as a separate module, referred 
to as a secure application module (abbreviated as SAM) and executed in the form of 
a chip card. 

The method for testing the authenticity of chip card 1 by external device 2 can 

take place as follows. 

External device 2 communicates input data, for example a random number, to 

chip card 1 via transmission channel B. Additional apparatus 4 of chip card 1 uses 
the input data to generate authenticity data and communicates the authenticity data 
to external device 2 via transmission channel B. External device 2 receives the 
authenticity data and decides on the authenticity of chip card 1 on the basis of the 
received authenticity data by means of additional apparatus 6. 

The described method can be modified insofar as authenticity data can be gen- 
erated by additional apparatus 4 of chip card 1 without input data from external de- 
vice 2, or generation of authenticity data can already be begun before the input data 
are completely transmitted. Further modifications can be to transmit the input data or 

authenticity data via transmission channel A. A plurality of different methods C3n be 
used for generating the authenticity data. For example the authenticity data can be 
calculated from the input data or the authenticity data can be generated by exploiting 
special physical effects, optionally in accordance with material properties of the ad- 
ditional apparatus. The important thing in all methods for generating the authenticity 
data is that the latter cannot be simulated by unauthorized third parties with appara- 
tuses having the outer dimensions of chip card 1. Such simulation could be, if the 

authenticity data are calculated, to implement the algorithm processed by additional 

apparatus 4 on a powerful computer. In order to prevent this one should design ad- 
ditional apparatus 4 so that its computing power is far above that attainable with 
available microcontrollers. 

In the variant of the invention shown in Fig. 1, both transmission channel A and 
transmission channel B permit bidirectional data exchange, i.e. data exchange from 

chip card l to external device 2 and data exchange from external device 2 to chip 

card 1. The separation between transmission channel^ and transmission channel B 



can be of either a physical or a logical nature. With physical separation of the trans- 
mission channels one selects for transmission channel B a separate transmission path 
completely independent from transmission channel A. One can thus for example 
provide an additional line between chip card 1 and external device 2, or contactless 
transmission can take place between chip card 1 and external device 2 which is in- 
dependent from standard data transmission via transmission ChaiUiel A With logical 
separation of transmission channels A and B, transmission channels A and B are 
physically one and the same transmission channel, i.e. one and the same line or one 
and the same contactless transmission path. However, one uses for data transmission 

different signals which can be separated from each other by chip card 1 or terminal 

2. 

Fig. 2 shows a block diagram of a form of the invention somewhat modified 
over Fig. 1. Chip card 1 and the external device are again interconnected via bidi- 
rectional line A used for standard data exchange. This line is a realization of trans- 
mission channels in case chip card 1 is a contact-type chip card. If contactless chip 
card 1 is to be used instead, transmission channel A is not realized ill the form Of a 
line but by a contactless transmission path via which data are transmitted for exam- 
ple as electromagnetic, electrostatic, magnetic, acoustic or optical signals. This dif- 
ferent design of transmission channel A is also applicable in the form of the inven- 
tion shown in Fig. 1. In contrast to Fig. 1, data required for authenticity testing are 
communicated via two separate transmission channels B\ 8Tid B 2 SCCOrdillg tO Fig, 2. 
Transmission channel Si is used for data transmission from external device 2 to chip 
card 1 and transmission Channel Bj for data transmission in the reverse direction. 
Transmission channels B\ and B 2 can be separated either logically or physically from 
each Other and from transmission channel A. 

In a development of the invention, one of transmission channels B\ or i? 2 can 
be identical with transmission channel A y i.e. authenticity data or data required for 
authenticity testing can be transmitted partly via transmission channels. In all em- 
bodiments of the invention it is fundamentally possible to integrate transmission 
channel A into the authenticity testing method, i.e. communicate part of the data 
transmitted in this method via transmission channel A. 



Division of the transmission channel for data required for authenticity tCSting 
into transmission channels B x and B2 as shown in Fig. 2 can be necessary in particu- 
lar when the signals formed by chip card 1 and external device 2 in the authenticity 
testing method are so different physically that transmission via the same channel is 
impossible, This may be the case for example when only the authenticity of chip 
card 1 is to be tested and chip card 1 emits for authenticity testing special electro- 
magnetic signals which can be generated only with authentic additional apparatus 4. 

The electromagnetic signals are then communicated via transmission channel B 2> and 
control signals influencing the generation of the electromagnetic signals can be 
transmitted from external device 2 to chip card 1 via transmission channel Bi, 

Fig. 3 a shows a block diagram for an embodiment of the invention wherein 
data required for authenticity testing are transmitted between Chip Card 1 and exter- 
nal device 2 via the standard data line, i.e. transmission channel A for standard data 
and transmission channel B for authenticity data are bound to the same line so that 
the separation between channels A and B is not physical but only logical. Unlike 
FigS. 1 and 2, Fig. 3fl does not Show transmission channels A and B themselves but 
rather a realization of the channels in the form of the standard data line. In order to 
ensure differentiation from the representation of the transmission channels, the lines 

or transmission paths are shown as simple arrows. It is Stated in parentheses Which 
transmission channels are realized by the particular line or transmission path. 

Within chip card 1 microcontroller 3 and additional apparatus 4 are connected 

with the standard data line. Further, microcontroller 3 and additional apparatus 4 are 
interconnected. Logical separation of transmission channels A and B is effected by 
microcontroller 3 and additional apparatus 4, which executes essential parts of the 
authenticity testing method, each filtering out the signals relevant for them or sub- 
jecting the standard data line to the signals generated by them. If this should be nec- 
essary, synchronization or data exchange is possible via the connecting line between 
microcontroller 3 and additional apparatus 4. 

External device 2 can be constructed in a similar way to chip card 1 and con- 
tain microcontroller 5 and additional apparatus 6 which are connected with the stan- 
dard data line and with each other. The system shown in Fig. 3a can transmit data 
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required for authenticity testing in a digital form via the standard data line. A signal 
pattern possible in this connection is shown in Fig. 4a and described in the corre- 
sponding text. 

Fig. 3 b shows a block diagram of an embodiment of the inventive system 
wherein data required for authenticity testing are transmitted in the form of digital or 
analog signals via the standard data line. As in Fig. 3a 5 transmission channels A and 
B for standard data and authenticity data are again separated not physically but only 

logically. On the part of chip card 1 the logical separation of transmission Channels 
A and B is effected by mixing/demixing module 7 which splits signals from the stan- 
dard data line into standard data signals and authenticity data signals 01* brings to- 
gether signals for standard data and signals for authenticity data for transmission via 
the standard data line. For this purpose, mixing/demixing module 7 IS Connected 
with the standard data line, on the one hand, and with microcontroller 3 and addi- 
tional apparatus 4, on the other hand. Further, microcontroller 3 and additional appa- 
ratus 4 are interconnected. External device 2 is constructed analogously and likewise 
has mixing/demixing module 8 connected with the standard data line and with mi- 
crocontroller 5 and additional apparatus 6. In external device 2 microcontroller 5 and 
additional apparatus 6 are also interconnected. The system shown in Fig. 3b can 
process not only the analog signal patterns shown in Figs. 4b and 5b but also the 
digital signal patterns shown in Figs. 4a and 5a. 

Fig. 4a shows a signal pattern on the standard data line of the system shown in 
Fig. 3a. The signal level is shown as a function of time t. The standard data line 
transmits both the dashed-line signals of transmission channels, i.e. standard data, 
and the signals of transmission channel B shown in the form of continuous lines, i.e. 
authenticity data. Since transmission of standard data via the standard data line is 

defined fay ISO standard 7816 and transmission of authenticity data is to be effected 
in conformity with ISO without impairing the standard data and at high speed, one 
has used transition regions TZ defined in the ISO standard which are disposed at the 
beginning and end of each data signal and within which the signal is not scanned and 
evaluated. The signal pattern within the transition regions thus has no influence on 
the evaluation of the signal according to ISO standard 7816 and can be used for 



transmitting authenticity data. For this purpose, the authenticity data are modulated 
upon the signal for the standard data by means of a suitable modulation method, e.g. 
amplitude modulation, frequency modulation, pulse-coded modulation, etc. For 
scanning and evaluating the authenticity data one then of course requires an addi- 
tional device Since a Chip card designed solely by the ISO standard would overlook 
authenticity data contained in the transition regions. Thus, additional apparatus 4 not 
present in conventional chip cards is already required for reading the authenticity 
data, which considerably impedes unauthorized reproduction of inventive chip card 
1 . Additional apparatus 4, which is not present in standard chip cards, is also neces- 
sary for transmitting authenticity data within the transition region and ultimately also 
for generating authenticity data. Corresponding additional apparatus 6 is also re- 
quired in external device 2. One thus attains a very high security level altogether. 
Fig. 4b shows a signal pattern over time on the standard data line which differs 

from the pattern shown in Fig. 4a in that authenticity data are transmitted as analog 

signals. Otherwise the signal pattern in Fig. 4b meets the same criteria as underlie 
Fig. 4a, i.e. authenticity data are communicated within transition regions TZ Of Stan- 
dard data and one can use the modulation methods stated for Fig. 4a. Processing of 
the signals shown in Fig. 4b is effected using the system according to Fig. 3b. The 
system shown in Fig. 3a is unsuitable since mixing/demixing modules 7 and 8 
shown in Fig. 3b are required for separating and bringing together signals for 
authenticity data and signals for standard data. The use of analog signals for data 
transmission impedes unauthorized reproduction of chip card 1 or external device 2 
even ftuther since this requires additional know-how for integrating the required 

analog technology into chip card 1. The knowledge of digital technology required 
for constructing conventional chip cards is insufficient alone. 

Fig. 5a shows the signal pattern on the standard line for a variant of logical 

separation of transmission channels A and B. The signal for standard data is dashed, 
the signal for authenticity data is continuous. In this embodiment, tolerance T per- 
mitted by ISO Standard 78 16 for the Signal level of standard data is used for trans- 
mitting authenticity data. For this purpose the authenticity signal is superimposed on 
the standard data signal, the level of the authenticity signal being within the permis- 
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sibie tolerance range of the signal for standard data. One must make sure that the 

actually occurring level fluctuations of the standard data signal together with the su- 
perimposed authenticity signal do not cause tolerance range Tto be fiXCesdfid. Be- 
sides the standard data signal, the basic signal for superimposition selected can be 
any signal, e.g. the Clock Signal or the signal for the operating voltage. In all cases 
authenticity data can be transmitted via existing lines or transmission paths, the sig- 
nals transmitted via the Same line Or transmission path being separated only logi- 
cally. 

Fig. 5b shows the time behavior of signals meeting similar conditions to the 
signals according to Fig. 5a. The main difference over Fig. 5a is that authenticity 
data are transmitted by means of analog signals, i.e. in contrast to Fig. 5a the origi- 
nally existing signal is superimposed not by a digital Signal but by an analog signal, 
tolerance range Talso being taken into account here. Like the signal pattern accord- 
ing tO Fig- 5a ? the signal pattern according to Fig. 5b is processed or generated with 
the system shown in Fig. 36. Mixer/demixer 3, 8 is again used for superimposing 
and separating the analog or digital authenticity signal and the originally existing 
signal. 

The modulation methods described for Fig. 4a can also be used in the embodi- 
ments according to Figs. 5a and 5b, 

Fig. 6 shows a block diagram of a variant of the inventive system wherein 
transmission channels A for standard data and B for authenticity data are physically 

separated, standard data being transmitted via a line and authenticity data COntaCt- 
lessly using two transceivers 9 and 10. Transceivers 9 and 10 are each connected 
with one of additional apparatuses 4 and 6. Additional apparatus 4 of chip card 1 is 
further connected with microcontroller 3 connected to the standard data line (trans- 
mission channel^). Additional apparatus 6 of the external device is also connected 
with microcontroller 5 again connected to the standard data line. Contactless data 
transmission between transceivers 9 and 10 can be realized in different ways. For 
example, one can use forms of transmission customary in the area of chip card tech- 
nology via electromagnetic waves, magnetic Or electric fields and light in the visible 
or invisible range. If an especially high security standard is to be attained, one se- 



lects the form of transmission so that it cannot be performed with conventional chip 
cards but necessitates special hardware. In this connection one can improve the secu- 
rity standard even farther if the additionally required hardware preSUPPOSCS a VCiy 
high measure of know-how, is inaccessible to an unauthorized third party and/or can 
be realized only with complex and costly equipment. For example, one can use for 
transmission radiation-induced luminescence or electroluminescence of a suitable 
material. It is also expedient to dispose the luminescent material on the chip card in a 
special pattern in order to impede reproduction further. One Call alSO USe a Certain 
spatial arrangement of different receivers and transmitters so that reproduction from 
discrete components is extremely difficult. One can likewise use luminescent mate- 
rials which are very hard to procure, and to mislead an unauthorized third party one 
can use a mixture of wavelengths for data transmission, the information being con- 
tained only in a single wavelength or having to be combined from information por- 
tions scattered over different wavelengths, etc. 

A further variant of data transmission iS tO Subject Chip Card 1 to a high- 
frequency pulse whereupon chip card 1 modulates the high-frequency pulse and 
sends it back to the external device. 

In all variants, reproduction or manipulation of chip card 1 or external device 2 
can also be impeded if additional apparatus 4, 6 is coupled to microcontroller 3, 5 
and works properly only if this connection actually exists. This coupling impedes 
imitation of additional apparatus 4, 6 by means of discrete components when micro- 
controller 3, 5 offers no simple possibility of external coupling. 

Chip card 1 can be executed as a contact-type chip card wherein standard data 
are transmitted via one or more contact surfaces. Chip card 1 can also be executed as 
a contactless chip card wherein standard data are transmitted contactlessly. 



- 12- 



Patent claims 

A method for testing the authenticity of a data carrier (1) having an integrated 
Circuit fry an external device (2) with which the data carrier (1) exchanges data, 
comprising the steps of: 

providing a first transmission channel (A) for transmitting signals between 

the data carrier (1) and the external device (2) ? 

providing a second transmission channel (B) logically separated from the 

first transmission channel (A\ the separation of the first and SeCOttd 
transmission channels being so designed that data transmission via one 
transmission Channel does not interfere with data transmission via the 
other transmission channel and the second transmission channel (B) is 
activable during the total time period between activation and deactivation 
of the data carrier (1), 

having the data carrier (1) generate a signal required for authenticity 
testing, 

transmitting the Signal for authenticity testing from the data carrier (1) to 
the external device (2) or a signal required for generating the signal for 
authenticity testing from the external device (2) to the data carrier (1) at 

least partly via the second transmission channel, and 
having the external device (2) receive the signal for authenticity testing, 
and deciding on the basis of the received signal whether the data carrier 
(1) is authentic. 

A method according to claim 1 ? characterized in that the second transmission 
channel (B) is provided by modulating the signal of the first transmission chan- 
nel 

A method according to claim 2, characterized in that modulation does not im- 
pair an ISO compatibility of data exchange between the data carrier (1) and the 

external device (2) existing for the first transmission channel (A). 
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4. A method according to either of claims 2 to 3, characterized in that modulation 
is performed in areas of the signal pattern which are not evaluated according to 
the ISO standard. 

5. A method according to either of claims 2 to 3, characterized in that the changes 
caused by modulation in the signal of the first transmission channel (A) are 
Within the range of variation of the signal level permitted by the ISO standard. 

6. A method according to any of claims 2 to 5, characterized in that modulation 
and demodulation of the signal are performed in the data carrier (1) and in the 
external device (2) with the aid of a mixing/demixing device (7, 8) in each 
case. 

7. A method according to any of claims 1 to 6, characterized in that the first 
transmission channel (/I) is a line for transmitting standard data or a line for 
transmitting the clock signal or a line for the supply voltage. 

8. A method for testing the authenticity of a data carrier ( 1) having an integrated 
circuit (3) by an external device (2) with which the data carrier (1) exchanges 

data, comprising the steps of: 

providing a first transmission channel (A) for transmitting signals between 
the data carrier (1) and the external device (2), 

providing a second transmission channel (B) physically separated from 
the first transmission channel (A) and comprising at least one line or 
contactless transmission path not provided according to the ISO standard, 

the second transmission channel (B) being activable during the total time 

period between activation and deactivation of the data carrier (1), 
having the data carrier (1) generate a signal required for authenticity 

testing, 

transmitting the signal for authenticity testing from the data carrier (1) to 
the external device (2) or a signal required for generating said signal from 
the external device (2) to the data carrier (1) at least partly via the second 
transmission channel (B\ and 
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having the external device (2) receive the signal for authenticity testing, 

and deciding on the basis of the received signal whether the data carrier 

(1) is authentic, 

9. A method according to claim 8, characterized in that the contactless transmis- 
sion path is realized by transmitting the data as electromagnetic, electrostatic, 
magnetic, acoustic or optical signals. 

10. A method according to claim 9, characterized in that a mixture of wavelengths 

is used for transmission via the contactless transmission path. 

11. A method according to any of claims 1 to 10, characterized in that the decision 
on authenticity of the data carrier (1) is contingent on whether data exchange is 

possible between the devices (3, 4) to which the first and second transmission 

channels are coupled in the data carrier (1). 

12. A data carrier (1) which can exchange data with an external device (2) and has 
an integrated circuit, wherein 

the data Carrier (1) has a first device (3) for generating signals for data 
exchange between the data carrier (1) and the external device (2), and the 
first device (3) is adapted to be coupled to a first transmission channel 

(4% 

the data carrier (1) has a second device (4) for generating signals required 
for authenticity testing of the data carrier (1), and the second device (4) is 

adapted to be coupled to a second transmission channel (B) and con- 
nected with the first device (3), 

the first and second transmission channels are separated logically or 
physically, and 

data exchange with the second device (4) does not interfere with data ex- 
change with the first device (3), and the second device (4) is ready for 
generating signals for authenticity testing of the data carrier during the 
total time period between activation and deactivation of the data carrier 

(1). 
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13. A data carrier according to claim 12, characterized in that the first device (3) 
and the second device (4) are each coupled to the transmission channels (A 9 B) 
via a mixing/dernixing module (7). 

1 4. A system for testing the authenticity of a data carrier (1) and/or an external de- 
vice (2) comprising: 

a data carrier (1) with a first device (3) for generating signals for data ex- 
change with the external device (2) and a second device (4) for generating 
and/or processing signals for authenticity testing, 

an external device (2) with a first device (5) for generating signals for 
data exchange with the data carrier (1) and a second device (6) for gener- 
ating and/or processing signals for authenticity testing, 
a first transmission channel (A) for transmitting signals between the first 
device (3) of the data carrier (1) and the first device (5) of the external 
device (2) ? 

and a second transmission channel (B) for transmitting Signals between 
the second device (4) of the data carrier (1) and the second device (6) of 
the external device (2), the first and second transmission channels (A, B) 
being separated logically or physically and the separation of the first and 
second transmission channels (A, B) being so designed that data transmis- 
sion via one transmission channel does not interfere with data transmis- 
sion via the other transmission channel, and the second transmission 

channel (B) being activable during the total time period between activa- 
tion and deactivation of the data carrier (1). 
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Abstract 

The invention relates to a method for testing the authenticity of a data earner 
(1) and/or an external device (2) which enters into data exchange with the data car- 
rier (1). According to the invention, the data carrier (1) and the external device (2) 
are each equipped with a special additional apparatus (4, 6) for generating and/or 
testing authenticity data. Data transmission between the data carrier (1) and the ex- 
ternal device (2) as required for authenticity testing is performed at least partly via a 
special transmission channel (B), The transmission channel (B) for transmitting 
authenticity data is separated physically or logically from a transmission channel (A) 
for transmitting standard data so that there is no mutual interference of data trans- 
mission Via the two transmission channels (A, B). In authenticity testing, the addi- 
tional apparatuses for generating and/or testing authenticity data (4, 6) of the data 
carrier (1) and external device (2) and optionally also the transmission channel (B) 
for authenticity data must meet Special demands which cannot be met by conven- 
tional designs. The transmission channel (B) for transmitting authenticity data is ac- 
tivable during the total time period between activation and deactivation of the data 

carrier (1) so that authenticity testing can be performed anytime. 
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